Gambling Not on GamStop Sites Outside the Scheme Judged on a Phone

Gambling not on GamStop means playing with an operator that holds no Great Britain licence, so the national self-exclusion register never sees the account. Such sites are legal to run offshore, illegal to offer to British customers, and outside every UK protection: no licence condition, no ADR scheme, no compensation route.

For a decade I have watched the phrase "not on GamStop" do the work of a promise. It reads like freedom. In practice it usually means one thing only: the operator holds a licence somewhere else — Curaçao, Anjouan, Kahnawà:ke, or nothing at all — and is therefore not bound by the licence conditions that shape every British site. The scheme itself is not a wall around gambling; it is a wall around licensed gambling. Gamstop Online, as it was renamed in November 2025, blocks accounts with companies licensed in Great Britain and nothing else. That is a fact about its scope, not a loophole, and the distinction matters because the protections travel with the licence, not with the website.

Fewer people use these sites than the noise suggests. Gambling Commission analysis published on 5 November 2026, covering April 2025 to April 2026, put engagement with illegal gambling websites at 2.5 per cent of adults who had gambled online in the past four weeks, plus another 1.5 per cent in the past twelve months. Read the other way: roughly nineteen in twenty online gamblers do not go near them. This page looks at what sits behind that small share, from the angle it matters most — the phone in the hand, the app in the drawer, the licence behind both.

One naming note before anything else, since it wastes people's time: the scheme is often typed "gamestop", and the word "game" suggests itself. It is GamStop, and the register behind it is Gamstop Online.

What Licence Actually Governs the Site in Your Hand

Step back to the law, because it is blunter than most coverage admits. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the offence turns on the operator, not the player. On summary conviction it carries up to 51 weeks' imprisonment, a fine at level 5, or both — six months in Scotland. The Commission's own wording, published on 21 October 2024, is that it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction. Section 33 also applies to remote gambling where at least one piece of remote gambling equipment sits in Great Britain, or where the provider knows or should know the facilities are likely to be used here.

Nothing in that paragraph makes the player a criminal. It does mean the site is operating outside its legal permission, and enforcement follows. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. In July to September 2026 alone it referred 1,835 websites and issued 546 notices. Disruption is not decoration: across 160 illegal websites measured, engagement fell by an average of 32 per cent afterwards, and by 91 per cent where a registrar block landed.

So the practical question is never "does this site take my deposit", which costs the operator nothing. It is "which regulator is standing behind it when something goes wrong" — and whether that regulator can reach the operator, or the operator can simply outlast it.

Gambling Sites Not on GamStop and the Registers Behind the Badges

The single checkable benchmark on this topic comes from the regulator with the shortest reach and the most transparency: the Curaçao Gaming Authority. Its National Ordinance on Games of Chance took effect on 24 December 2024 and replaced the old master-licence model. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and licensing activity at the four former master licensors ceased between 18 August 2024 and 31 January 2025. Operators holding a valid licence at the changeover got a six-month provisional licence by law, extended a further six months to 24 December 2025. Which means: any site still flying a /JAZ number or a legacy orange seal is displaying history, not a licence. The CGA says plainly that a historic /JAZ number must not be treated as proof of one.

The price of that licence is public too. A B2C application fee is a one-time non-refundable EUR 4,592, with EUR 150 per ultimate beneficial owner; the total annual B2C fee is EUR 47,450, split between a EUR 24,490 licence fee and a EUR 22,960 supervisory fee, payable in full by 15 January. An Anjouan B2C licence is EUR 17,828 to issue and the same to renew.

Here is the sting. ABC News reported on 31 December 2025 that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comorian financial intelligence officials described the operation as illegal — a claim Anjouan Gaming rejected, stating on 10 June 2026 that a licence is "not, and has never been presented as, a universal authorisation to operate in every country in the world". Reading those two positions side by side is the whole job. A licence is a business certificate in a jurisdiction that chose to sell one. It is not a promise to anyone holding a phone in Manchester.

How the British Model Sets the Bar

British-licensed sites are the standard of comparison here, not because they are saintly — the enforcement notices alone disprove that — but because the terms they must offer are written down and enforceable.

The bonus row is the one that costs money quietly. From 19 January 2026, Social Responsibility Code 5.1.1 caps wagering requirements at ten times, and bans promotions mixing two or more product types — the Commission noted it chose a cap over a ban because some licensees had been applying up to 60 times. Offshore, that ceiling does not exist. One operator's published terms require a 25× playthrough before winnings from a casino bonus can be withdrawn, weighted by game: slots at 100 per cent of the contribution, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, live dealer and jackpot games nothing at all. A roulette player working off the same bonus needs twenty times the turnover of a slots player. That is not a term, it is a trapdoor with a carpet over it.

Gambling Sites Not on GamStop UK and What the App on the Phone Hides

Search for UK gambling sites not on GamStop and the results are mostly apps, which is where the licence stops being legible. A native app from a British-licensed operator is built to the same licence conditions as the website: the identity check has to be done before gambling, the balance has to be withdrawable whenever the player wants it, and the account cannot be opened by someone on the register. Once the app is installed, a check on the register becomes impossible from inside it.

Offshore apps have none of that scaffolding, and their software increasingly leans on trust signals that a phone screenshot cannot test: a certified random number generator, segregated player funds, an approved dispute body. Those things exist on paper in the better jurisdictions. Anjouan's published standards require exactly them, and Anjouan names EGIS ADR, Axion ADR, iGaming ADR and an independent operator as its approved ADR providers, with complaints resolved inside 30 days before escalation. The catch is that paper is not the same as practice, and the regulator selling 1,300 licences a year holds no lever over a server in another hemisphere.

Kahnawà:ke is the older, stranger example. Its Interactive Gaming Licence has been held by a single entity since 1999, with client operators working under Authorizations hosted at one data centre in the Mohawk Territory. Its Logo Certificate Program, effective 15 January 2010, lets a player click the Commission's logo to generate a Certificate of Good Standing. That is a real check — and a genuine outlier. Most of the market has nothing comparable.

The Importance of Identity Checks

If a single mechanism decides whether offshore gambling ends in a payout or a locked account, it is identity verification, because that is where money changes direction.

The first time is supposed to be routine. In the UK, Licence Condition 17 has required since 7 May 2019 that identity be verified before a customer is permitted to gamble, and the Commission expects checks brought forward to before the first deposit — not relied on later. Most British sites match a name, address and date of birth against credit reference and electoral roll data, and no documents change hands at all.

Later it gets pointed. Under Licence Condition 17.1.1, a withdrawal request must not trigger a demand for extra information the licensee could reasonably have requested earlier, unless another legal duty — anti-money-laundering rules, typically — requires it. The trigger in remote casinos is €2,000: identification and verification when deposits or withdrawals of that amount or more are in play, including linked transactions across a single logged-in session. Above that, documents are legitimate. Million-traffic volumes bear this out: over a quarter of the complaints reaching the Commission's Contact Centre concern identity verification, a figure it reported on 12 August 2026, and it has criticised operators onboarding customers on partial or equivocal matches — including a middle name in place of a forename, which can break the matching against the register itself and quietly undo a self-exclusion.

The warning signs are specific and easy to read. A site that accepts deposits for weeks without a whisper of verification and then asks for a passport the moment a balance is requested is not being careful, it is applying friction where it costs the player. A site asking for a selfie where fraud is genuinely suspected is behaving reasonably; a site asking for a bank statement as a condition of a small withdrawal is not. And a site that cannot say which regulator it answers to, or shows a certificate behind its badge naming a different domain from the one being visited, has told you everything.

Five Signs an Offshore Operator Can Be Believed

The licence is current, not historical

A dead seal is the most common deception in this market, because nothing about it looks dead. Check the regulator's public register directly rather than the badge, and confirm the domain listed matches the domain being used. On the Curaçao register, the legacy /JAZ numbers ceased to mean anything when the four master licensors stopped issuing between August 2024 and January 2025, and the old orange certificates died on 15 October 2025. A certificate shown behind a CGA Certificate of Operation seal must redirect to cert.cga.cw; if the design differs, or the domain on it differs from the site being visited, the site is displaying somebody else's licence.

The withdrawal is not designed to be reversed

Britain banned the cancellation of a withdrawal in October 2021 — RTS 14B, "consumers must not be given the option to cancel their withdrawal request" — because reversal tempts people back in. A site offering a "cancel withdrawal" button is showing you its priorities, and so is one whose term permits a single withdrawal request at a time. That precise term, alongside manual review of every fifth or tenth withdrawal, formed part of a £900,000 regulatory settlement announced on 21 October 2026. Check the withdrawal screen and the terms page before depositing, not after.

The bonus terms fit on one screen

Under the British rules the cap is ten times, and the significant conditions must be transparent, prominent and no more than one click away. Offshore, read three numbers: the wagering multiplier, the maximum cashout, and the maximum bet while wagering. One operator limits bonus-derived winnings to 300 per cent of the bonus amount and voids the excess; another restricts bets during wagering to 20 per cent of the deposited amount, with breach risking account closure and forfeiture of the bonus and all winnings generated. If any of those numbers is missing, the answer is that it is missing on purpose.

The dispute route exists before the dispute

A named ADR provider, in the terms, with a contact address, is a good sign — Anjouan requires its licensees to designate one and to resolve complaints within 30 days first; the UK requires a free route and a referral after eight weeks. The difference is leverage. On a British licence, an ADR decision in the consumer's favour is backed by compliance rates routinely above 95 per cent and by a regulator that can act on a breach. Offshore, the provider is a private company with no power over an operator that keeps paying its annual fee. Ask what happens on day 31.

Customer funds are described, not just promised

"In a separate account" is not the same as "safe". British rules require the operator to publish an insolvency rating — not protected, medium or high — and to state it in writing before the customer gambles, with a six-monthly reminder if the funds are unprotected. Offshore, even where segregation is a stated requirement, there is no disclosure duty and no rating to read. A site that will not say where player money sits during insolvency has answered the question by not answering it.

What Careful Checks Involve

1. Look up the licence on the regulator's own register, and match the domain name to it, not the logo to the design. Why: a seal is an image; a register entry is a record, and the two come apart in exactly the cases that matter.
2. Read the bonus terms before claiming anything: multiplier, maximum cashout, maximum bet, game weighting, expiry. Why: the weighting is where a 25× requirement silently becomes 50× or more for anyone not playing slots.
3. Check the withdrawal mechanics — one request or many, any cancellation option, any per-day or per-week cap. Why: a maximum withdrawal limit is treated in Britain as an unfair term, and in the Commission's own example is phrased as "up to £50 per day and up to £500 per week".
4. Establish who handles a dispute and on what timescale, then keep the operator's own complaints procedure in mind: most disputes are thrown out by ADR providers because the player never went through it first. Why: an unanswered complaint is not the same thing as a rejected one.
5. Set the payment route deliberately. Card payments to British-licensed sites benefit from bank gambling blocks and the credit-card ban; crypto transfers settle on their own clock — a TRC-20 USDT transfer to a new wallet consumes about 130,000 energy, roughly 26 TRX, against about 65,000 energy to an existing one — and a failed transfer can cost the fee without moving the money. Why: a payment method is a recovery route as much as a deposit route.
6. Install blocking software as a second layer, not as a substitute for a self-exclusion. Why: the register is an instruction to licensed operators; blocking software is an obstacle to everything else, and one operator's list is not the other's.

The Parts Nobody Repeats

Offshore sites are not licensed in Great Britain. That is the sentence the marketing removes. UK protections do not follow a player to them: no licence condition on fair terms, no requirement to hold customer funds separately with a published insolvency rating, no free ADR route, no obligation to disclose bonus terms in full one click away.

Self-exclusion, where it comes up, is not a switch to be flipped elsewhere. Registering with Gamstop Online blocks gambling with every company licensed in Great Britain for the chosen term — six months, one year, five years, or five years with auto-renewal — and it cannot be cancelled or deactivated during that period. It then stays in place after the term ends unless the person contacts Gamstop to remove it. Under the terms last updated on 20 May 2026, auto-renewal can only be switched off in the final six months of a five-year term and can run for up to four further five-year periods, and if it is never deactivated the data is held through a further automatic seven-year period during which operators are told the person was previously excluded. The 2025 annual report devotes a section to refusing early removals. That is the design, and an offshore site is not a way around it — it is a way around the protections attached to it.

Help, meanwhile, is free and does not depend on which site was used. The National Gambling Helpline, run by GamCare, is on 0808 8020 133, twenty-four hours a day, every day of the year, with live chat and WhatsApp reaching the same number. In Wales the listed number is 0808 2819 265. GamCare works across England and Scotland; BeGambleAware points to the Helpline and its online chat; GamFam supports families through its GRA5P programme; Gamblers Anonymous England, Wales and Ulster is on 0330 094 0322 with around 250 meeting locations and no appointment needed; Gam-Anon UK and Ireland supports the family and friends of someone gambling. NHS gambling treatment is there too — the National Gambling Clinic takes self-referrals for young people aged 13 to 18 from anywhere in England and for adults in Greater London and the South East, and integrated care boards commission eight regional services receiving almost 5,000 referrals a year against a target of 3,000. Citizens Advice gives free, confidential help with the debt that often arrives alongside.

None of these routes care whether the account was on a register. That is rather the point.

The Numbers Behind the Small Print

What gambling sites are not on GamStop is a question with two answers: legally, any operator without a Commission licence, whether licensed in Curaçao, Anjouan, Kahnawà:ke or nowhere; practically, an operator whose protections are described in a foreign register rather than in British licence conditions. The checkable part is always the same — the register entry, the domain on it, the withdrawal mechanics, the bonus numbers.

The rest is arithmetic. Illegal gambling websites identified through the Commission's affiliate-page method rose from 364 in May 2024 to 535 in July 2025. Its illegal gambling dashboard recorded 586 sites accessible to British consumers in September 2026, and 311 were disrupted in the second quarter of 2026 to 2027, with 77 per cent of them showing reduced traffic. Meanwhile the legal market the licence protects keeps growing: total Great Britain gross gambling yield reached £17.5 billion in the year to March 2026, up 4.4 per cent, with remote casino, betting and bingo at £8.3 billion. Small share, large fight.

And the register itself, at the end of 2025, held 561,983 active exclusions, rising to 614,738 by July 2026 — of whom more than one in two had chosen the maximum five-year term. That is not a market gap. That is half a million people using a system that works because the licence makes operators obey it.